Who we are
CloudSms operates CloudSms. This policy explains what personal data we collect, why we collect it, and the choices you have. For data protection purposes, CloudSms is the controller of the data described here.
Data we collect
- Account data: name, email address, password (stored as a secure hash), and optional two-factor settings.
- Order and wallet data: products bought, amounts, top-up references, invoices, delivered codes and account details.
- Support data: messages you send through tickets, service requests or the contact form.
- Technical data: IP address, browser and device type, pages visited, and security logs such as failed sign-in attempts.
- Cookie data: as described in our Cookie Policy.
We do not store full card numbers. Card payments are handled by our payment providers.
Account marketplace data
If you list or purchase an account through the CloudyBoost marketplace, we may process information needed to operate and secure the transaction, including listing details, seller and buyer account identifiers, transaction records, dispute information, verification evidence and screenshots submitted for review. Screenshots may contain personal information, so sellers must redact unnecessary private information before uploading them.
Marketplace evidence is used for verification, fraud prevention, dispute handling, security and legal compliance. We limit access to authorized personnel and service providers who need the information for these purposes.
How we use your data
- To create your account, process orders and deliver products.
- To keep the service secure, prevent fraud and enforce our terms.
- To send account emails such as verification, receipts and support replies.
- To improve the site, but only using analytics you have allowed.
- To meet legal, tax and accounting duties.
Legal bases
Where data protection law requires a legal basis, we rely on performing our contract with you (orders and accounts), our legitimate interests (security, fraud prevention, service improvement), your consent (optional cookies and marketing), and legal obligations.
Who we share data with
We share only what is needed with: payment providers that process top-ups; SMS and number suppliers that fulfil your order; email and hosting providers; and authorities where the law requires it. We do not sell your personal data.
International transfers
Our suppliers and hosts may be located in other countries. Where data leaves your country, we take reasonable steps so that it stays protected.
How long we keep data
We keep account and order records while your account is open and for as long afterwards as needed for tax, accounting and dispute purposes. Delivered SMS codes are removed when you mark them used. Security logs are kept for a limited period.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your data, object to or restrict certain processing, and withdraw consent at any time. Email us and we will respond within a reasonable time. You can also complain to your local data protection authority.
Security
We use encrypted connections, hashed passwords, CSRF protection, login rate limiting and optional two-factor authentication. No system is perfectly secure, so please use a strong, unique password and turn on two-factor authentication.
Children
CloudSms is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Changes to this policy
We may update this policy. The date at the top shows when it last changed, and we will highlight material changes on the site or by email.
Contact us
Questions about this page? Email Sms@cloudyboost.com or use our contact page.